Uploaded image for project: 'Virtual Infrastructure Deployment'
  1. Virtual Infrastructure Deployment
  2. VID-971

fix CRITICAL weak-cryptography issues identified in sonarcloud

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: High High
    • Istanbul Release
    • Honolulu Release
    • None

      Sonarcloud identified the following security bugs in your project and, as agreed by the TSC, should be fixed within the Honolulu release. Any not finished in Honolulu must be fixed within the Istanbul release. Follow each of the URLs for details on each each bug, along with recommended fixes.

       

      https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXBdRDzXtdpme0FCPEoq&open=AXBdRDzXtdpme0FCPEoq

      Project: onap_vid
      Component: onap_vid:vid-app-common/src/main/java/org/onap/vid/aai/util/SSLContextProvider.java
      Message: Enable server certificate validation on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 93
      Effort: 5min
      Creation-Date: 2018-08-06T13:40:06+0200
      URL: https://sonarcloud.io/project/issues?id=onap_vid&issues=AXBdRDzXtdpme0FCPEop&open=AXBdRDzXtdpme0FCPEop

      Project: onap_vid
      Component: onap_vid:vid-app-common/src/main/java/org/onap/vid/aai/util/SSLContextProvider.java
      Message: Enable server certificate validation on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 97
      Effort: 5min
      Creation-Date: 2018-08-06T13:40:06+0200
      URL: https://sonarcloud.io/project/issues?id=onap_vid&issues=AXBdRDzXtdpme0FCPEoq&open=AXBdRDzXtdpme0FCPEoq

            ikram ikram
            tonylhansen tonylhansen
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: